Cross-Input Signature Aggregation

The original motivation was to have cross-input signature aggregation. Even if there are multiple parties, even if the transaction is like spending coins from multiple separate coins together, we want a single signature for all of them. The difference is the aggregation of the keys done off-chain or on-chain. You can't do it off-chain because you don't know ahead of time which outputs are going to be spent together.

Transcript

Play full episode

Remember Everything You Learn from Podcasts

Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.